Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa
File:                     38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa (raw, json)
Hash identifier:          jt25vkwrq6xpy8qdagKoo7PmNyRVY+TVVuGzPBIReGE=
Subject key identifier:   E6:39:0D:1A:7B:31:CE:D1:3B:9B:AC:E9:FC:1F:C4:93:1D:89:57:49
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EE4F1F5F59DBD91F6C5605700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     3320
IP address blocks:        136.0.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f5:f5:9d:bd:91:f6:c5:60:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=3cdab5e2-5118-457e-a311-4fea5f58f9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:34:60:17:20:ae:6d:b6:7c:86:c4:45:66:
                    83:d3:d4:82:55:f2:d5:cd:3c:ab:98:9e:56:c9:43:
                    31:71:2d:82:b0:19:65:e7:78:52:67:44:f7:91:51:
                    01:de:26:b2:cb:b2:df:a2:d4:8e:fe:19:20:4e:3a:
                    e6:d0:af:75:c8:51:32:c4:e0:80:d0:5e:40:b4:df:
                    f9:e8:88:ef:10:25:7f:61:85:27:48:94:71:3f:1a:
                    d3:d8:ac:ef:d9:2e:01:e4:9f:8d:a0:f8:17:98:e8:
                    c9:8d:c4:4c:73:eb:3c:5b:f3:22:13:96:47:b3:30:
                    f8:73:99:af:83:18:84:19:3f:12:c3:2d:cf:d2:16:
                    90:99:ca:26:66:6c:bd:e1:51:39:72:ba:7b:fd:da:
                    83:e0:35:fa:b5:2c:8a:91:c6:a3:cd:ec:f2:63:a1:
                    d7:68:5e:a8:a7:d5:fb:8f:37:d4:7d:00:86:47:c0:
                    25:6a:86:cc:19:77:60:a5:52:b3:b0:44:49:74:3f:
                    2a:a2:a7:6f:00:fd:8d:bb:16:11:44:e7:81:01:e9:
                    28:02:9f:98:76:d7:f2:75:31:3a:90:02:97:10:f2:
                    e2:e7:f1:e3:3e:e8:22:48:57:ed:b8:ff:b2:7a:9f:
                    98:fd:35:58:fb:e9:f0:5a:24:ce:2f:72:17:b6:ae:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:0D:1A:7B:31:CE:D1:3B:9B:AC:E9:FC:1F:C4:93:1D:89:57:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:43:e3:c3:69:e0:df:6a:fb:9d:90:86:e7:77:24:46:10:d9:
         a1:58:44:0b:57:dc:c6:08:c7:2b:2a:d9:ec:ec:43:e0:77:34:
         bc:1b:b7:06:b4:a3:c7:8a:e3:c0:a4:79:c3:65:a7:21:78:fb:
         a1:43:9f:d9:99:f9:5b:2e:b2:8b:3d:e3:f1:86:4c:11:a1:20:
         1e:0f:ce:db:24:2f:4d:16:84:1e:e9:21:72:06:94:66:9b:ca:
         9c:2f:87:70:ca:bc:07:30:75:ab:24:3a:81:57:de:02:94:b0:
         63:41:00:c7:a9:3f:30:26:e5:36:80:fe:d4:ab:ec:a4:f1:c8:
         b1:90:ec:5c:c7:80:95:40:03:f1:a7:60:7e:bd:5d:13:8c:ca:
         3a:9b:71:37:8f:18:6f:b9:09:dd:b5:13:b6:8d:6c:55:fd:b0:
         fa:27:cf:20:c0:25:f9:30:0a:91:37:67:51:cf:40:7c:84:95:
         32:e6:71:3f:6e:69:e2:2c:b8:98:09:44:d4:e4:65:ba:98:c2:
         16:b9:e1:68:b0:6c:ba:bf:fd:07:99:e6:a6:c9:1b:58:b1:dc:
         28:4d:86:15:cb:09:cc:e1:90:49:23:cf:57:8c:29:92:64:f0:
         8c:ec:71:5c:04:96:1d:b1:0c:f4:75:38:ae:04:64:cf:91:29:
         90:51:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:09:42 2026 by rpki-client